Source Country Codes (CCs)

#	Key	CCs		Name	Total		Max	Avg
01			RU	Russian Federation	486.85 MB	19.32 %	18.79 KB/s	5.63 KB/s
02			CN	China	457.71 MB	18.16 %	36.18 KB/s	5.30 KB/s
03			US	United States of America	326.58 MB	12.96 %	50.82 KB/s	3.78 KB/s
04			IN	India	300.38 MB	11.92 %	30.21 KB/s	3.48 KB/s
05			KR	Korea, The Republic of	164.80 MB	6.54 %	9.91 KB/s	1.91 KB/s
06			DE	Germany	138.04 MB	5.48 %	4.38 KB/s	1.60 KB/s
07			BR	Brazil	91.41 MB	3.63 %	25.48 KB/s	1.06 KB/s
08			BG	Bulgaria	57.70 MB	2.29 %	4.26 KB/s	667.88 B/s
09			NL	Netherlands	39.45 MB	1.57 %	10.64 KB/s	456.65 B/s
10			TW	Taiwan (Province of China)	37.64 MB	1.49 %	36.70 KB/s	435.65 B/s
11		Others			419.70 MB	16.65 %	22.16 KB/s	4.86 KB/s

Source AS Numbers (ASNs)

#	Key	ASNs	Name	CC		Total		Max	Avg
01		8359	MTS		RU	358.17 MB	14.21 %	9.07 KB/s	4.15 KB/s
02		9829	BSNL-NIB National Internet Backb...		IN	261.11 MB	10.36 %	30.13 KB/s	3.02 KB/s
03		4837	CHINA169-BACKBONE CHINA UNICOM C...		CN	239.47 MB	9.50 %	34.03 KB/s	2.77 KB/s
04		4134	CHINANET-BACKBONE No.31,Jin-rong...		CN	147.41 MB	5.85 %	18.35 KB/s	1.71 KB/s
05		201814	MEVSPACE		PL	129.90 MB	5.15 %	49.54 KB/s	1.50 KB/s
06		51167	CONTABO		DE	121.13 MB	4.81 %	4.27 KB/s	1.40 KB/s
07		16509	AMAZON-02		US	79.02 MB	3.14 %	1.08 KB/s	914.57 B/s
08		4766	KIXS-AS-KR Korea Telecom		KR	77.28 MB	3.07 %	9.82 KB/s	894.46 B/s
09		60904	ATSTEL-AS		RU	58.19 MB	2.31 %	1.23 KB/s	673.44 B/s
10		198465	BTHOSTER		GB	37.61 MB	1.49 %	16.60 KB/s	435.29 B/s
11		Others				1.01 GB	40.11 %	50.08 KB/s	11.70 KB/s

Protocols

#	Key	Protocol	Total		Max	Avg
01		TCP	2.36 GB	93.62 %	82.09 KB/s	27.31 KB/s
02		ICMP	149.50 MB	5.93 %	2.16 KB/s	1.73 KB/s
03		UDP	11.26 MB	0.45 %	495.36 B/s	130.29 B/s
04		Others	0.00 B	0.00 %	0.00 B/s	0.00 B/s

Destination TCP Ports

#	Key	Port	Name	Total		Max	Avg
01		23	TELNET	1.76 GB	74.66 %	74.32 KB/s	20.39 KB/s
02		3389	RDP (Microsoft Terminal Server)	406.85 MB	17.24 %	30.20 KB/s	4.71 KB/s
03		22	SSH (Secure Shell)	56.98 MB	2.41 %	1.50 KB/s	659.51 B/s
04		445	Microsoft-DS Active Directory	33.87 MB	1.44 %	521.75 B/s	392.03 B/s
05		80	HTTP (Hypertext Transfer Protocol)	11.88 MB	0.50 %	933.79 B/s	137.54 B/s
06		62130	N/A	7.36 MB	0.31 %	1.92 KB/s	85.23 B/s
07		56348	N/A	7.36 MB	0.31 %	1.94 KB/s	85.20 B/s
08		21	FTP (File Transfer Protocol - control)	6.50 MB	0.28 %	404.93 B/s	75.20 B/s
09		8080	HTTP Proxy	4.46 MB	0.19 %	508.60 B/s	51.65 B/s
10		443	HTTPS (Hypertext Transfer Protocol over TLS/SSL)	2.49 MB	0.11 %	157.31 B/s	28.78 B/s
11	---	1433	Microsoft SQL Server	1.59 MB	0.07 %	53.12 B/s	18.43 B/s
12	---	3306	MySQL	1.06 MB	0.05 %	51.71 B/s	12.31 B/s
13	---	8000	N/A	1.06 MB	0.04 %	547.72 B/s	12.25 B/s
14	---	2375	Docker REST API	764.96 KB	0.03 %	44.21 B/s	8.85 B/s
15	---	139	NETBIOS Session Service	625.00 KB	0.03 %	66.98 B/s	7.23 B/s
16	---	2222	N/A	542.89 KB	0.02 %	16.42 B/s	6.28 B/s
17	---	5000	UPnP	541.86 KB	0.02 %	61.25 B/s	6.27 B/s
18	---	27017	N/A	445.41 KB	0.02 %	62.06 B/s	5.16 B/s
19	---	5555	ADB (Android Debug Bridge)	380.67 KB	0.02 %	23.99 B/s	4.41 B/s
20	---	9898	Dabber	379.77 KB	0.02 %	877.13 B/s	4.40 B/s
21	---	8728	Mikrotik API	373.05 KB	0.02 %	12.45 B/s	4.32 B/s
22	---	10000	Webmin / BackupExec	362.64 KB	0.02 %	54.03 B/s	4.20 B/s
23	---	993	IMAPS (IMAP over TLS/SSL)	354.37 KB	0.02 %	52.09 B/s	4.10 B/s
24	---	6379	Redis	342.86 KB	0.01 %	11.32 B/s	3.97 B/s
25	---	4444	Blaster	342.77 KB	0.01 %	60.85 B/s	3.97 B/s
26	---	61616	N/A	332.70 KB	0.01 %	31.09 B/s	3.85 B/s
27	---	8443	Apache Tomcat	304.40 KB	0.01 %	17.27 B/s	3.52 B/s
28	---	3128	HTTP Proxy	292.06 KB	0.01 %	20.23 B/s	3.38 B/s
29	---	5060	SIP (Session Initiation Protocol)	287.29 KB	0.01 %	25.92 B/s	3.33 B/s
30	---	7547	TR-069 (abused by Mirai/IoT botnets)	286.06 KB	0.01 %	5.56 B/s	3.31 B/s
31	---	Others		49.56 MB	2.10 %	767.70 B/s	573.56 B/s

Destination UDP Ports

#	Key	Port	Name	Total		Max	Avg
01		123	NTP (Network Time Protocol)	1.62 MB	14.39 %	84.31 B/s	18.76 B/s
02		5060	SIP (Session Initiation Protocol)	1.08 MB	9.55 %	274.34 B/s	12.45 B/s
03		443	https (secure http (TLS))	986.14 KB	8.76 %	32.65 B/s	11.41 B/s
04		500	ISAKMP	504.01 KB	4.48 %	10.65 B/s	5.83 B/s
05		1900	SSDP	458.85 KB	4.08 %	43.62 B/s	5.31 B/s
06		161	SNMP (Simple Network Management Protocol)	336.69 KB	2.99 %	21.85 B/s	3.90 B/s
07		3702	WS-Discovery	316.28 KB	2.81 %	23.54 B/s	3.66 B/s
08		4614	N/A	306.18 KB	2.72 %	358.48 B/s	3.54 B/s
09		6881	BitTorrent	303.49 KB	2.70 %	5.22 B/s	3.51 B/s
10		1434	Microsoft SQL Monitor	280.75 KB	2.49 %	5.89 B/s	3.25 B/s
11	---	8081	N/A	279.75 KB	2.49 %	5.09 B/s	3.24 B/s
12	---	8000	N/A	276.90 KB	2.46 %	7.54 B/s	3.20 B/s
13	---	4000	N/A	271.27 KB	2.41 %	5.66 B/s	3.14 B/s
14	---	8080	N/A	268.90 KB	2.39 %	4.85 B/s	3.11 B/s
15	---	1027	N/A	268.04 KB	2.38 %	4.94 B/s	3.10 B/s
16	---	8082	N/A	266.28 KB	2.37 %	6.33 B/s	3.08 B/s
17	---	8083	N/A	264.66 KB	2.35 %	5.84 B/s	3.06 B/s
18	---	30301	BitTorrent	263.74 KB	2.34 %	5.92 B/s	3.05 B/s
19	---	5353	mDNS (Multicast DNS)	260.37 KB	2.31 %	6.32 B/s	3.01 B/s
20	---	11211	Memcached	221.97 KB	1.97 %	4.96 B/s	2.57 B/s
21	---	53	DNS (Domain Name System)	216.44 KB	1.92 %	18.41 B/s	2.51 B/s
22	---	3283	N/A	204.54 KB	1.82 %	18.34 B/s	2.37 B/s
23	---	5065	N/A	120.86 KB	1.07 %	4.17 B/s	1.40 B/s
24	---	5075	N/A	102.50 KB	0.91 %	26.55 B/s	1.19 B/s
25	---	137	NETBIOS Name Service	92.41 KB	0.82 %	13.03 B/s	1.07 B/s
26	---	7412	N/A	91.45 KB	0.81 %	13.50 B/s	1.06 B/s
27	---	7411	N/A	91.11 KB	0.81 %	13.27 B/s	1.05 B/s
28	---	64761	N/A	86.02 KB	0.76 %	2.49 B/s	1.00 B/s
29	---	389	LDAP (Lightweight Directory Access)	70.31 KB	0.62 %	3.67 B/s	0.81 B/s
30	---	853	domain-s (DNS query-response protocol run over TLS/DTLS)	63.35 KB	0.56 %	5.62 B/s	0.73 B/s
31	---	Others		1.29 MB	11.44 %	64.10 B/s	14.91 B/s

Source Operating Systems (Windows)

#	Key	Operating System	Total		Max	Avg
01		Windows-2000-RFC1323/Windows-XP-RFC1323	16.28 MB	40.01 %	481.30 B/s	188.47 B/s
02		Windows-Vista	16.17 MB	39.74 %	387.61 B/s	187.19 B/s
03		Windows-XP-SP1/Windows-2000-SP2+	4.35 MB	10.70 %	193.29 B/s	50.38 B/s
04		Windows-XP-SP1/Windows-2000-SP4	1.83 MB	4.50 %	50.50 B/s	21.18 B/s
05		Windows-XP-SP1/Windows-2000-SP3	1.35 MB	3.31 %	87.17 B/s	15.61 B/s
06		Windows-2000/Windows-XP	703.54 KB	1.73 %	321.05 B/s	8.14 B/s
07		Windows-98	2.32 KB	0.01 %	2.23 B/s	0.03 B/s
08		Windows-NT-4.0	313.62 B	0.00 %	0.43 B/s	0.00 B/s
09		Windows-98-lowTTL	299.03 B	0.00 %	0.51 B/s	0.00 B/s
10		Windows-XP-RFC1323	97.31 B	0.00 %	0.21 B/s	0.00 B/s
11		other-Windows	48.68 B	0.00 %	0.07 B/s	0.00 B/s

Source Operating Systems (Other Platforms)

#	Key	Operating System	Total		Max	Avg
01		unknown	1.80 GB	77.42 %	80.27 KB/s	20.78 KB/s
02		Linux	513.13 MB	22.13 %	49.47 KB/s	5.94 KB/s
03		undefined	10.22 MB	0.44 %	3.87 KB/s	118.25 B/s
04		Eagle	143.59 KB	0.01 %	5.72 B/s	1.66 B/s
05		NMAP	63.53 KB	0.00 %	72.14 B/s	0.74 B/s
06		Solaris	1.83 KB	0.00 %	6.10 B/s	0.02 B/s
07		OpenBSD	110.00 B	0.00 %	0.37 B/s	0.00 B/s
08		SunOS	49.88 B	0.00 %	0.08 B/s	0.00 B/s
09		ExtremeWare-4.x	24.07 B	0.00 %	0.02 B/s	0.00 B/s
10		DOS-WATTCP-1.05	3.27 B	0.00 %	0.00 B/s	0.00 B/s
11		Others	0.00 B	0.00 %	0.00 B/s	0.00 B/s

Observations:

1. Each image above contains a STACK AREA graphic, which means that each data set of the graphic is stacked on top of the previous one.
   
   
2. Lists of known TCP/UDP ports and associated service names can be found at the following documents:
   • Port Numbers, from IANA.
   • List of TCP and UDP port numbers, from The Wikipedia.
   • Common Ports, from packetlife.net.
     
     
3. A list of known Country Codes can be found at IANA. The country code "XX" stands for network flows that could not be associated with any country code, for example, flows from private networks.